Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: 7BoEIA+y+cUUa8kkBCNdKJvOBUy5s1wEpW9OWLtVCuA=
Subject key identifier: 88:34:36:58:6E:1C:4C:10:A0:84:DA:F5:F6:5B:DF:FE:6D:ED:C2:5E
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 01A03E966FDC73026E53D251B0032DB07FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0D29
Signing time: Wed 26 Aug 2026 15:00:41 +0000
Manifest this update: Wed 26 Aug 2026 15:00:41 +0000
Manifest next update: Thu 27 Aug 2026 15:00:41 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: FwR+4AfSW0O4WRde4IRxTsDSeMl0hekFyL2D7TQ7h/A=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:96:6f:dc:73:02:6e:53:d2:51:b0:03:2d:b0:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Aug 26 15:00:41 2026 GMT
Not After : Aug 27 15:00:41 2026 GMT
Subject: CN=883436586e1c4c10a084daf5f65bdffe6dedc25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:3f:67:b1:b5:9e:bd:1c:c8:40:66:cf:43:
ea:ac:66:41:91:c2:79:07:38:ae:bb:8b:44:7b:9c:
ed:d9:8f:e6:81:f6:de:c8:05:60:11:6a:f5:df:6b:
8d:9a:fd:61:c8:6f:fe:07:b8:32:87:e2:88:da:6c:
34:77:75:24:79:a6:58:89:15:82:cb:20:f4:0f:79:
2b:27:85:70:87:04:c6:e5:26:55:8b:79:e5:d4:55:
15:72:d0:fb:0a:8b:8c:38:76:b9:dd:b9:42:6a:e9:
08:79:e3:a9:f0:9c:e8:4c:c7:7d:d1:92:c8:6b:4e:
a3:99:38:e6:a5:d0:68:1f:a1:7c:ed:e6:50:3c:c0:
f8:24:9c:e3:4a:ad:09:ef:42:98:88:71:95:72:1e:
7d:25:6e:50:cf:3d:0e:54:f3:c3:e4:6b:8e:2b:5a:
47:11:28:ef:1f:74:93:2f:f6:82:44:97:40:e4:35:
60:b2:d2:c6:bd:c1:89:55:7e:36:7f:d5:4a:25:a9:
49:f8:90:8a:67:4d:65:74:57:7a:6b:ff:0e:48:f8:
d2:69:74:30:ad:55:09:74:04:0c:57:21:66:be:36:
e3:a7:d5:9d:d3:17:16:15:d6:00:ae:87:b4:85:e0:
ec:48:8d:7f:a8:8d:68:c6:3b:12:16:cf:98:28:d3:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:36:58:6E:1C:4C:10:A0:84:DA:F5:F6:5B:DF:FE:6D:ED:C2:5E
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e8:62:be:89:18:9b:e4:09:ab:b0:26:88:48:27:1c:f2:f9:
c7:7e:29:13:23:d3:63:6c:2b:24:25:76:77:1f:46:8d:3e:6d:
41:43:e7:d4:d1:b2:a8:4d:95:8b:58:24:0b:b9:eb:3a:1b:5f:
ac:aa:3f:fb:46:54:0c:69:94:31:09:50:d2:9e:af:44:71:bb:
05:8c:78:9c:04:42:cb:34:d1:cf:0f:59:79:40:e6:0b:34:e5:
9f:07:4a:44:cd:1d:6c:f4:ef:7b:83:80:1f:17:55:00:ce:f8:
8b:ee:96:17:d7:43:9a:b8:ea:59:1e:3b:df:df:2a:e3:f5:e3:
df:2f:17:89:98:28:e7:22:4c:3f:87:85:c7:2f:d9:69:8d:38:
9e:87:ce:af:e7:2b:78:93:19:16:74:cf:90:98:0c:6f:b9:2e:
d2:0a:c7:c3:5a:bc:36:3d:2b:9a:ab:b5:2e:cb:4b:2f:54:05:
79:ac:02:b4:1d:91:e3:5a:b9:6c:53:65:42:57:be:64:e1:67:
a4:fe:50:91:46:48:12:ff:a8:8e:66:af:3e:50:1e:0c:9a:b7:
4f:97:e0:b9:46:94:83:f0:85:1a:ca:4d:35:36:fa:cc:29:7e:
af:07:42:71:d6:0a:3f:cc:fb:e7:d9:0f:de:39:07:4a:b8:24:
a4:86:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:02:13 2026 by rpki-client